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Remarks 



L Introduction 

This is in response to the final Office Action dated 
Action rejects claims 1-4 under 35 U.S.C, §1 12, second paragraph as being indefinite for 
failing to particularly point out and distinctly claim the subject matter which the applicant 
regards as the invention. The Office Action then rejects c 

nonstatutory obviousness^type double patenting as being unpatentable over claims 1, 6 
and 8 of U.S. Patent No. 6.928,485 in view of U.S. Patent No. 6,570,866 to Murase et al 
("Murase"), Finally, the Office Action rejects claims 1-2C 
being unpatentable over U.S. Patent No. 6,529,508 to Li e 



Patent No. 6,061,712 to Tzeng ("Tzeng"). Claims 1-20 rbmain imder consideration, 
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June 1,2006. TheOflfice 



under 35 U.S.C. § 103(a) as 
;al. CLi")inview of U.S. 



U.S.C. §112, second paragraph 
that it is xmcertain in claim 1, 



IL Rejection; 35 U.S.C. SI 12. Second Paragraph 

The Office Action first rejects claims 1-4 under 35 
as being indefinite. In partictilar, the Office Action states 

lines 9-10, whether '^e plurality of client IP addresses" refers to "a plurality of IP 
addresses" in lines 5-6. 

In response to this rejection, Applicants have ameiided claims 1 and 2 to replace 
the phrase "plurality of client IP addresses" in those claims with the phrase "plurality of 
IP addresses." As a result of this amendment, claims 1 and 2 are now definite. Although 
claim 3 has not been amended, that claim is also definite tecause claim 3 claims with 
particularity that the IP addresses of claim 1 are network c 

For these reasons, claims 1-4 are now definite. As 
withdrawal of the rejection under 35 U.S.C. §1 12. 



lient IP addresses, 
a result, Applicants request the 



tlie 



Rejection: Obviousness-Tvpe Double Patenting 
The Office Action next rejects claims 1 and 8 on 
obviousness-type double patenting as being unpatentable 
Patent No. 6,928,485 in view of Murase. In response to 
filing herewith a terminal disclaimer disclaiming the termilnal 



groxmd of nonstatutory 
(j)ver claims 1, 6 and 8 of U.S. 
rejection. Applicants are 
part of the statutory term of 



tlis 
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any patent granted on Ae instant application which would extend beyond the expiration 
of the full statutory term of U.S. Patent No. 6,928,485. a restilt, the obviousness-type 
double patenting rejection has been overcome. Accordingjly, Applicants request the 
withdrawal of this rejection- 



refeitences : 



; processed 



indexes 



IV, Rejection; 35 U.S.C, $103fa^ 

The Office Action next claims 1-20 under 35 U.S. 
unpatentable over Li in view of Tzeng. AppUcants traversje 

In order for an invention to be obvious under 35 U; 
some suggestion to combine or modify cited prior art 
would show or suggest all elements of the claimed inventibn, 
neither Li nor Tzeng, alone or in combination* teach all 

Li teaches a method and apparatus for classifying 
whereby multiple parameter values for a packet are 
sets indicating which rules are matched by each parametei 
answer indexes are used to identify logical blocks in each 
TRUE values. Then> AND operations on the answer 
in the answer sets which could contain bits corresponding 
identify particular rules matched by the packet 

Tzeng teaches a method for IP routing table look- 
method for IP router look-up operations. According to 
operation is used that reduces or eliminates router perfornjai 
radix tree method hashes the furst k bits of an X bit IP 
of which is smaller than a single radix tree examining an 
bits of the IP address of the IP data packet are used as an i 
a pointer to the root node of one of these smaller radix 
the radix trees examines the significant bits of the remajnifig 
a match. Each match is stored in memory at least until a 
at a leaf node is considered a best match. If a match is foiind 
is obtained, whose output is the best route. 



C. § 103(a) as being 



Tzeng 



' add^ss 



: trei;s 



S.C. § 103(a), there must be 
in a manner which 
For the following reasons, 
el^ents of claims 1-20. 
jackets (not IP addresses) 

in parallel to obtain answer 
value. According to Li, 
answer set which contain 

are used to identify blocks 
to matched rules and to 



vp 



using a hashed radix tree 

a high speed roxite look-up 
nee bottleneck. Abashed 
to several radix trees, each 
elntire IP address. The first k 
index to a RAM whose output is 
As taught by Tzeng, each of 
n-k bits of the IP address for 
better match is found. A match 
a pointer to a second RAM 
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The present invention is directed to a method for 
servers within a distributed information network. This meithod 
least one network log, such as a server log or proxy log, 
table to arrange clients into related client clusters. More 
1, 5, 8 and 17 are each directed to an on-line method of classify 
the IP addresses of clients, into related clusters within the 
network. Each of those claims includes elements associate 
prefix/netmask table" from a plurality of network routing 
where the unified prefix/netmask entries comprise a pluralfity 
group or classify those IP addresses using common address 
determined according to a radix encoded trie classificatioc 



d^ermining the placement of 
uses information fi-om at 
at least one network routing 
p^cularly, independent claims 
ing IP addresses, such as 
iistributed information 

with generating "a unified 
t[able prefix/netmask entries, 
of IP addresses, and then to 
prefixes that have been 
process. 



V> Independent Claims 1. S. 8 and 17 

The Office Action rejects claims 1, 5, 8 and 17 stating 
element of "generating a unified prefix/netmask table fronji 
table prefix/netmask entries, said unified prefix/netmask 
IP addresses. More particularly, the Office Action cites fi jj 
and column 12, lines 14-38 as teaching this element. HoA^ever 
these cited passages teach this element. 

Figs. 7-8 of Li shows an answer set comprising an 
index comprising a two-tiered header. As is described at 
answer sets contain information related to a packet signati^re, 
on the answer sets in order to deteraiine if one or more 
set. Based on this determination, packets can be classified 
suggest in any way the element of claims 1,5,8 and 17 o 
prefix/netmask table fi-om routing table entries where the 

Column 8, lines 5-25 of Li states, in its entirety" 



The inventors have found that for classifying IP packets 
parameters are particularly useful: input port; source 
address; source TCP/UDP port number; destination 
of service; layer 4 packet type; ack bit; and, time 
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, in part, that Li teaches the 
a plurality of network routing 
ejitries comprismg a plurality of 
;s. 7-8; column 8, lines 5-25; 
', Applicants disagree that 



output vector with an answer 
4olumn 3, lines 50-57 of Li, 
Operations are performed 
are satisfied by the answer 
This figure does not teach or 
f[ generating a imified 
intries comprise IP addresses. 



s rules 



the following 9 
EP address; destination IP 
TCP/UDP port number; type 
of arrival. 



it I 
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According to the preferred embodiment of the invention, each rule is of the form: 

CLASS M: parameter l=condition to be salisfied by parameter 1 ; 
parameter 2=condition to be satisfied by parameter 2; 
parameter 3=condition to be satisfied by parameter 3; 

parameter N=condition to be satisfied by pjirameter N. 

A packet belongs to class M if every parameter value in the packet's signature 

matches the corresponding condition specified by the rule. The condition may be 

that the parameter value be the same as a parti culai^ value, that the parameter 

value be one of a nxunber of specified values or thi t the parameter value be within 

a range of values specified in the class definition njile. 

i 
i 

Accordingly, this passage of Li teaches that IP pacjcets can be classified by 
comparing mle conditions to one or more parameters, incl uding IP addresses. Once 
again, this passage does not teach or discuss or suggest in Euiy way the element of claims 
1, 5, 8 and 1 7 of generating a unified prefix/netmask table : 
where the entries comprise IP addresses. 

Column 12, lines 14-38 of Li states, in its entirety: 



fix>m routing table entries 



1 together 
thjn 



One procedure for optimizing the ordering 
involves grouping "neighbourhoods" of rules 
classification rules and r is a particular rule in R 
being the condition imposed on a packet's src valu^ 
the following two-dimensional rule: 

Class A: src=123.12O.0.O/16 dst=18978.0 J 
where/16 indicates that the src value of a packet 
portion which makes up the first 16 bits of the IP 
packet cannot satisfy r, then src(r)=123.1 20.0.0/1 6 
does not matter. For such rules one can write src(rj 

If rl and r2 are two rules in R then rl and 
is a prefix of src(r2) or src(r2) is a prefix of src(rl) 
neighboring rules can be indicated as rl.about.r2. 
rules are neighbors in the src dimension: 

rl: Class A: src=123. 120.0.0/16; dst=189 

r2: Class B: src=l 23. 120.9.0/24; dst=120. 

A neighborhood in the src dimension is a 
rl .about.r2 for any two rules rl and r2 in S. The 
neighborhood if no rule r in S is neighbors in the 
R-S (R-S is the set of all rules in R which are not 



af rules in the src dimension 
IfRis the set of 
one can define src(r) as 
by rule r. For example, if r is 



neij 
si-c 
ill 



0/16 

mcist match the network ID 

alddress 123,120,0.0 or the 

In some rules the src value 
=* 

r2 



For 



78 



are neighbors if either src(rl) 
The relationship between two 
example, the following 



73 



.0.0/16 
.0.0/16. 
spbset S of R such that 
ighborhood is an "entire" 
dimension with any rule in 
S). 
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17 



Accordingly, this passage of Li simply states that differeni 
of packets can be combined into a neighborhood of rules 
not teach or discuss or suggest in any way the element 
generating a unified prefix/netaiask table fix>m routing tab: 
comprise IP addresses. 

The Office Action then rejects claims 1,5,8 and 
1 6-24 and column 12, lines 14-38 of Li each teaches the e 
addresses which share a common prefix into a network clilent 
Applicants disagree that these passages of Li teach this element 
Specifically, column 12, lines 14-38 teach only that rules 
classification of packets can be grouped into neighborboo({ls 
teach, discuss or suggest grouping IP addresses (of netwoik 
network client clusters. 

Column 4, lines 16-24 of Li teaches in its entirety 



rules used in the classification 
This passage, once again, does 
of Qlaims 1 , 5, 8 and 17 of 
e entries where the entries 



stating that column 4, lines 
ement of "grouping IP 
cluster.** Once again, 
of claims 1, 5, 8 and 17. 
^at are used in the 

. This passage does not 
client computers) into 



The performance of the classification methods of tie invention may be optimized 
by ordering the rules in a way such diat true flags lend to be clustered into the 
same block in one of the answer sets. This reduces the number of AND operations 
needed to identify a rule which is matched by the signature of a packet. One way 
of achieving such an optimization is to group the r jles so that flags corresponding 
to subsets of the rules which are neighbors are grouped together. 



Thus, this passage teaches that the packet classification msthod of Li can be optimized by 
ordering rules into groups so as to reduce the number of ooerations applied to a packet 
signature during the classification process. This passage £ Jso does not teach, discuss or 
suggest grouping IP addresses (of network client computers) into network client clusters. 

For the forgoing reasons, the cited passages of Li do not teach or suggest the 
claim elements of claims 1, 5, 8 and 17 associated with generating '*a unified 
prefix/netmask table" from a plurality of network routing 
where the unified prefix/netmask entries comprise a plura 

group or classify those IF addresses using common address prefixes that have been 
determined according to a radix encoded trie classificatioipi process. There is no assertion 
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that Tzeng teaches these elements. Accordingly, neither 
combination, teach or suggest all elements of claims 1, 5, 
claims are allowable. It follows that dependent claims 2-4, 
allowable as being dependent upon an allowable base claiijn 
request that the rejection of claims 1-20 under 35 U.S.C. § 
those claims be allowed. 



nor Tzeng, alone or in 
and 17. As a result, these 
, 6-7, 9-16 and 18-20 arc 
Therefore, Applicants 
1 03(a) be withdrawn and that 



VI- Dependent claims 13-14 

The Office Action rejects claims 13 and 14, which 
independent claim 8, "for the same reasons set forth in claim 
Office Action cites Li, colunm 15, line 58 — colimm 16, liie 
retrie includes a fixed number of retrie levels." 

Claim 13 claims, in part: 



wherein the retrie includes shift, mask values whiclh are combined into a single 
value in a predecessor table. 

And claim 14 claims, in part: 



wherein the elements in a last retrie table level conltain only a next hop index so as 
to decrease the retrie table size. 



However, as discussed above, none of the passages cited 
and 17 teach anything related to a retrie or to the specific 
retrie as claimed in claims 13 and 14. The cited passage c 
a search algorithm of IP addresses for the classification 
can use different levels of IP addresses. However, this ci 
the retrie can include shift, mask values which are ccmbinled 
predecessor table, as is claimed in claim 13. This cited 
or suggestion that a last retrie level can contain only a nex|t 
retrie table size as is claimed in claim 14. Thus, the cited 



are each dependent upon 
1 above." In addition, the 
62 as disclosing that "the 



the rejection of claims 1 , 5, 8 
Elements associated with a 
f columns 15 and 16 discusses 
of packets and that the algorithm 
; citpd passage does not teach that 

into a single value in a 
pa|ssage also makes no teaching 
hop index to decrease the 
passage of Li does not teach or 
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suggest all elements of claims 13 and 14 and, therefore, th|Dse claims are allowable for 
this additional reason. 

Vn. Conclnsion 

In response to the rejection under 35 U.S.C, §1 12, Applicants have amended 
claims 1 and 2 to remove the term "client". No new matter has been introduced as a 
result of these amendments. In response to the double patenting rejection, Applicants are 
filing herewith a terminal disclaimer. Finally, Applicants have traversed the rejection of 
the claims under 35 U.S.C. § 1 03(a). For the reasons disci ssed above, neither Li nor 
Tzeng, alone or in combination, teach or suggest all eleme nts of the claims as currently 
pending. As a result, claims 1-20 are aJlowable over the cjited art. Reconsideration and 
allowance of all claims is respectfully requested. 



Respectfully submitted. 



Date: October 2, 2006 
AT&T Corp. 
Room 2A-207 
One AT&T Way 
Bedminster, NJ 07921 




W, Herring, Jr. 
Reg, No. 51,069 
Attoriey for Applicant 
Tel.: 973-533-1616 
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